在node.js中使用jsonwebtokens进行身份验证

Question

我正在使用jsonwebtoken生成用于验证用户的JSON webtokens，我完成了生成令牌但是每当我向服务器发送令牌时它都没有得到验证它总是以 TypeError结尾：jwt.verify不是函数< / strong>有人请帮忙解决这个问题，如何验证令牌，

var express = require('express');
var app = express();
 var bodyParser = require('body-parser');
var morgan = require('morgan');
var mongoose = require('mongoose');
var moment = require('moment');

 var jwt = require('jwt-simple'); // used to create, sign, and verify tokens
var config = require('./config'); // get our config file
var User = require('./models/users'); // get our mongoose model


 var port = process.env.PORT || 8080; // used to create, sign, and verify    tokens
 mongoose.connect(config.database); // connect to database
app.set('superSecret', config.secret); // secret variable

 // use body parser so we can get info from POST and/or URL parameters
app.use(bodyParser.urlencoded({ extended: false }));
app.use(bodyParser.json());

// use morgan to log requests to the console
app.use(morgan('dev'));


 var router = express.Router();
router.post('/authenticate', function(req, res, next) {
console.log(req.body.name);
User.findOne({ name: req.body.name }, function(err, user) {
    if (err) {
        throw err;
    }
    if (!user) {
        res.json({ success: false, message: 'Authentication failed. User not found.' });
    } else if (user) {
        if (user.password != req.body.password) {
            res.json({ success: false, message: 'Authentication failed. Wrong password.' });
        } else {
             // now create token here
            var token = jwt.sign(user,app.get('superSecret'),{
                expiresIn:1440 
            });

            res.json({
                success: true,
                message: 'Enjoy your token!',
                token: token
            });
        }
    }
})
})
//decoding jwt
  router.use(function(req, res, next) {

   // check header or url parameters or post parameters for token
  var token = req.body.token || req.query.token || req.headers['x-access- token'];

  // decode token
   if (token) {

   // verifies secret and checks exp
   var decode =  jwt.verify(token, "jsonWebTokens", function(err, decoded) {      
      if (err) {
         return res.json({ success: false, message: 'Failed to authenticate token.' });    
      } else {
        // if everything is good, save to request for use in other routes
       req.decoded = decoded;    
      next();
     }
    });

  } else {

    // if there is no token
  // return an error
  return res.status(403).send({ 
    success: false, 
    message: 'No token provided.' 
  });

  }
   });

 router.get('/', function(req, res, next) {
    res.send("hello and welcome to express routing");
 })

router.get('/users', function(req, res, next) {
    User.find({}, function(err, users) {
        res.json(users);

   // decode token

    })
     })

 app.use('/api', router);
 // basic route
 app.get('/', function(req, res) {
     res.send('Hello! The API is at http://localhost:' + port + '/api');
     });

 //for users
 app.get('/setup', function(req, res) {

    // create a sample user
    var nick = new User({
    name: 'Nick Cerminara',
    password: 'password',
    admin: true
    });

    // save the sample user
    nick.save(function(err) {
      if (err) throw err;

      console.log('User saved successfully');
      res.json({ success: true });
  });
 });

app.listen(port);
console.log('Magic happens at http://localhost:' + port);

我遵循了本教程https://scotch.io/tutorials/authenticate-a-node-js-api-with-json-web-tokens#authenticating-and-creating-a-token

Answer 1

var jwt = require('jwt-simple');

您应该使用npm模块jsonwebtoken。 jwt-simple模块仅用于编码和解码jsonwebtoken。

请参阅： https://www.npmjs.com/package/jwt-simple

它不会为您提供sign，create和verify api。

虽然模块jsonwebtoken确实提供了这些API。

JsonWebToken：
https://www.npmjs.com/package/jsonwebtoken

要解决此问题，

1. 安装jsonwebtoken模块，如果你还没有。 npm install jsonwebtoken
2. 修改变量jwt以导入jsonwebtoken。 var jwt = require('jsonwebtoken');

如果有效，请告诉我。如果不这样做，我很高兴看。